TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.79K
Photos
73
Videos
71
Links
482

Showing posts older than #292 · Back to latest

Older Posts 20 shown
Post #291 1.13K
⚠️ ‘Despicable’ iPhone Hacks In Armenia Find NSO Spyware ‘In Active Warzone’.

For the first time, the Israeli company’s spyware has been used in a conflict zone, according to researchers.

In mid-2021, Apple sent a warning to Anna Naghdalyan, then a spokesperson for Armenia’s foreign affairs agency, that her iPhone had possibly been hacked by a foreign government.

https://www.forbes.com/sites/thomasbrewster/2023/05/25/iphone-hacks-in-armenia-show-nso-spyware-in-warzone/?sh=4b76625f1a56
Forbes ‘Despicable’ iPhone Hacks In Armenia Find NSO Spyware ‘In Active Warzone’ For the first time, the Israeli company’s spyware has been used in a conflict zone, according to researchers.
Post #290 1.18K
CVE-2022-3723_PoC.js668 B
CVE-2022-3723 Exploit PoC: Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

● @ckure has not verified the authenticity of the exploit.
Post #289 1.19K
CVE-2023-28204 (Safari zero-day, may have been actively exploited) - commit e34edaa

RegExpGlobalData::performMatch issue leading to OOB read

https://github.com/WebKit/WebKit/commit/e34edaa74575ee13efcebdb7672b949a743ab32a
GitHub [JSC] RegExpGlobalData::performMatch issue leading to OOB read · WebKit/WebKit@e34edaa https://bugs.webkit.org/show_bug.cgi?id=254930 rdar://107436732 Reviewed by Alexey Shvayka. Fixed two issues: 1) In YarrInterpreter.cpp::matchAssertionBOL() we were advancing the string position ...
Post #287
cKure Red pinned «The Dangers of Google’s .zip TLD. First URL is of the domain .zip as an example. https://github.com∕kubernetes∕kubernetes∕archive∕refs∕tags∕@v1271.zip https://github.com/kubernetes/kubernetes/archive/refs/tags/v1.27.1.zip https://medium.com/@bobbyrsec/the…»
Post #286 1.19K
The Dangers of Google’s .zip TLD. First URL is of the domain .zip as an example.

https://github.com∕kubernetes∕kubernetes∕archive∕refs∕tags∕@v1271.zip

https://github.com/kubernetes/kubernetes/archive/refs/tags/v1.27.1.zip

https://medium.com/@bobbyrsec/the-dangers-of-googles-zip-tld-5e1e675e59a5
Medium The Dangers of Google’s .zip TLD Can you quickly tell which of the URLs below is legitimate and which one is a malicious phish that drops evil.exe?
Post #284 1.36K
Send My: Arbitrary data transmission via Apple's Find My network.

https://positive.security/blog/send-my
positive.security Send My: Arbitrary data transmission via Apple's Find My network | Positive Security Apple AirTags: Arbitrary data can be uploaded from non-internet-connected devices by sending Find My BLE broadcasts to nearby Apple devices. We're releasing an ESP32 firmware that turns the microcontroller into an (upload only) modem, and a macOS application…
Post #283
cKure Red pinned «● Satellite hacking [14Ts227]: Russia uses uplink/downlink jamming via Tobol program to disable StarLink in Ukraine amid ongoing war. Starlink appears to be immune to EW at satellite frequencies, it has GPS in its structure, which is vulnerable to electronic…»
Post #282 1.19K
● Satellite hacking [14Ts227]: Russia uses uplink/downlink jamming via Tobol program to disable StarLink in Ukraine amid ongoing war.

Starlink appears to be immune to EW at satellite frequencies, it has GPS in its structure, which is vulnerable to electronic interference. If the GPS signal is jammed, Starlink cannot register, and even after successful registration, its speed is reduced until the connection is completely lost.

https://dzen.ru/a/ZEFpV9yMqWP8Kuui

https://www.thespacereview.com/article/4060/1

https://www.washingtonpost.com/national-security/2023/04/18/discord-leaks-starlink-ukraine/

https://eurasiantimes.com/russias-tobol-ew-system-cuts-off-starlink-from-its-ground-terminals/

https://www.washingtonpost.com/world/2023/04/20/bakhmut-ukraine-war-leaked-documents/
Post #281 1.06K
Double zero-day vulnerabilities in Chrome and Edge – check your versions now.

CVE-2023-2033: Type confusion in V8 in Google Chrome prior to 112.0.5615.121. A remote attacker could potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High.

CVE-2023-2136: Integer overflow in Skia in Google Chrome prior to 112.0.5615.137. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High.

https://nakedsecurity.sophos.com/2023/04/24/double-zero-day-in-chrome-and-edge-check-your-versions-now/
Post #271 1.25K
Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions.

https://github.com/user1342/Obfu-DE-Scate
GitHub GitHub - user1342/Obfu-DE-Scate: Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify… Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compar...
Post #270 1.26K
RedTeam: WinRAR SFX archives can run PowerShell without being detected.

https://www.bleepingcomputer.com/news/security/winrar-sfx-archives-can-run-powershell-without-being-detected/
BleepingComputer WinRAR SFX archives can run PowerShell without being detected Hackers are adding malicious functionality to WinRAR self-extracting archives that contain harmless decoy files, allowing them to plant backdoors without triggering the security agent on the target system.
Post #269 931
Wire-Tap by the Greece government on journalists and opposition parliamentarians by former PM after they used predator and other spyware softwares against civilians by botched law changes and legal loopholes.

https://youtu.be/SpitB6p7-W4
YouTube Greece’s spyware scandal | The Listening Post Greece is facing an ongoing surveillance scandal after it was revealed that several journalists had their phones hacked by spyware employed for surveillance by the Greek intelligence service. While a scandal of this magnitude should typically attract the…
Post #267
cKure Red pinned «● An Android app from China executed a zero-day exploit on millions of devices. Fast-growing e-commerce app Pinduoduo had an EvilParcel stow-away. https://github-com.translate.goog/davinci1010/pinduoduo_backdoor https://mp-weixin-qq-com.translate.goog/…»
Post #266 1.02K
● An Android app from China executed a zero-day exploit on millions of devices.

Fast-growing e-commerce app Pinduoduo had an EvilParcel stow-away.

https://github-com.translate.goog/davinci1010/pinduoduo_backdoor

https://mp-weixin-qq-com.translate.goog/s/P_EYQxOEupqdU0BJMRqWsw

https://techcrunch.com/2023/03/20/google-flags-apps-made-by-popular-chinese-e-commerce-giant-as-malware/

https://arstechnica.com/information-technology/2023/03/android-app-from-china-executed-0-day-exploit-on-millions-of-devices/
TechCrunch Google flags apps made by popular Chinese e-commerce giant as malware Google has flagged several apps made by a Chinese e-commerce giant as malware, alerting users who had them installed, and suspended the company’s official app.
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →